Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/hWRqGYVmCWMq0Y1sle0EKmWSB94.roa
File: hWRqGYVmCWMq0Y1sle0EKmWSB94.roa (raw, json)
Hash identifier: obdTuMexMzDiPJAN90w8Hcb2NiK0kbzvsWZeLWPpsqE=
Subject key identifier: 85:64:6A:19:85:66:09:63:2A:D1:8D:6C:95:ED:04:2A:65:92:07:DE
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 019423D803DD6F7113AE1CEA39B57467D77C
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/hWRqGYVmCWMq0Y1sle0EKmWSB94.roa
Signing time: Wed 01 Jan 2025 21:49:06 +0000
ROA not before: Wed 01 Jan 2025 21:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201160
IP address blocks: 185.29.192.0/24 maxlen: 24
185.29.193.0/24 maxlen: 24
185.29.194.0/24 maxlen: 24
185.29.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:03:dd:6f:71:13:ae:1c:ea:39:b5:74:67:d7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85646a19856609632ad18d6c95ed042a659207de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:61:e5:d9:66:77:58:a6:1d:c0:7e:e4:6a:
9f:70:d8:06:0d:cb:32:a5:19:bf:a7:1c:ad:59:60:
18:06:e1:1c:b7:20:ec:e2:9e:ba:e7:b3:7b:c1:cc:
e5:62:23:f6:f6:2b:7d:bb:ff:b2:fe:6a:84:f4:0b:
37:8c:d0:42:2c:e4:f1:ef:a0:fb:f8:a3:da:54:5c:
6c:0f:e7:5b:0d:49:71:2d:28:3a:81:89:20:0b:8e:
01:e1:8e:f2:4b:59:ab:95:cb:45:46:82:2c:cc:f8:
14:26:cb:d7:90:4c:a7:26:b8:ed:6b:b7:00:1f:e6:
c4:b6:8e:a7:01:47:7a:38:e4:2e:ea:64:3e:3d:c7:
e1:ba:e3:cf:cd:c0:54:ea:c0:57:8a:fd:27:3b:3f:
29:b1:d6:3a:a9:77:50:c2:ee:3a:64:51:a4:ad:cd:
6e:03:6a:42:0c:02:41:b3:76:8a:5a:11:be:33:11:
65:c8:f2:c1:77:e8:01:de:da:21:96:6c:74:de:d1:
f1:3e:58:c8:8c:40:8a:17:7c:31:d4:d7:a1:98:a8:
58:37:78:21:d3:9c:0b:e2:06:d3:13:42:5b:fc:ce:
29:8e:34:7c:e0:35:38:54:40:10:5e:70:85:c1:d9:
6c:54:1e:44:3f:20:2c:0b:d4:31:9d:c0:c5:a6:1f:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:64:6A:19:85:66:09:63:2A:D1:8D:6C:95:ED:04:2A:65:92:07:DE
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/hWRqGYVmCWMq0Y1sle0EKmWSB94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.192.0/22
Signature Algorithm: sha256WithRSAEncryption
14:4e:71:85:4b:eb:9d:91:32:86:57:1b:e2:11:13:88:f1:90:
8d:76:79:41:e1:da:5e:89:43:8d:ba:56:6a:e8:d7:0a:d9:91:
20:b4:19:f5:5e:4f:88:69:35:98:12:da:27:2e:6b:c5:05:0b:
02:b2:79:d9:ad:a5:0a:69:f0:e4:a4:be:3c:19:d6:2e:87:88:
19:cf:dc:7c:6f:c1:97:f3:e3:17:d8:1a:d1:19:c2:08:92:2b:
1c:f8:cf:46:38:aa:8a:79:f3:e0:06:ae:81:f8:28:df:9a:3e:
43:ca:b4:76:dd:12:a2:8e:af:6f:9d:6c:7c:04:02:eb:fc:c4:
ea:64:b3:6f:82:ee:48:74:33:a9:be:64:76:1d:83:73:00:73:
62:dc:8d:95:9e:ba:90:99:4c:7f:07:87:50:f7:60:64:0a:05:
44:cf:3c:5e:17:c4:4a:5b:55:7f:59:75:c8:99:16:c6:84:b0:
9d:1b:84:37:2a:e9:a2:73:16:44:75:bc:a2:2d:2f:bd:fe:5d:
3c:5e:a6:b6:ac:ef:ac:07:ef:2a:c7:fe:34:3a:e4:3a:92:ac:
f7:da:8b:b3:30:f5:b9:c9:83:cb:74:42:58:4e:05:0b:5a:38:
cd:14:4d:3f:9c:ae:22:13:86:90:49:c7:9e:81:65:3b:5d:22:
90:5b:e1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:49:06 2025 by rpki-client